Detects unusual DDNS connections based on the DDNS Service pattern group.
Overview
| Type | Stream |
|---|---|
| Referenced objects | Pattern group DDNS 서비스78 |
Query
1| matchsig field=domain guid="266c1818-8fb1-4395-bacd-a2adbe64100c" verify=f
2| eval result = strjoin("\n", foreach(valueof(_1, "rule"), _matchsig_result)) | fields - _matchsig_result